$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft File: 373B103C68D9B84455801815E437C49839794406.mft (raw, json) Hash identifier: bUtCA4xxabqXizMx7tna6TRNcl39bal+vZspQYwPH1s= Subject key identifier: B5:E4:05:61:5F:43:85:31:38:50:4A:35:0A:F9:2A:A0:FA:28:4F:D2 Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06 Certificate issuer: /CN=373B103C68D9B84455801815E437C49839794406 Certificate serial: 3B0E36FC5E42458F2133931AEBCA6FF1C9F8CA27 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft Manifest number: 0139 Signing time: Mon 21 Sep 2026 18:18:27 +0000 Manifest this update: Mon 21 Sep 2026 18:13:27 +0000 Manifest next update: Thu 24 Sep 2026 22:25:27 +0000 Files and hashes: 1: 3131302e3233362e302e302f31362d3136203d3e2039383038.roa (hash: ypOszjBaxK7aN3qHrAMdQaOEEef+WU0nK8BVdjeedMs=) 2: 3131302e3233362e302e302f31352d3135203d3e2039383038.roa (hash: hEDr8/74LWqVAxQIAl/qC7YYDZiTh64u3Td4QxxhlWk=) 3: 373B103C68D9B84455801815E437C49839794406.crl (hash: yvFezbExL8UY/qYKHx4Cx+m/tU94R1a7bCY39IZArOw=) 4: 3131302e3233372e302e302f31362d3136203d3e2039383038.roa (hash: xFtnh6XjWsHSoRFqwMT0dAdbo39z/4IBEm/NltK9l5A=) 5: 3131332e31382e302e302f31362d3136203d3e2039383038.roa (hash: l2TtlQd2OeYBccu9u8JTA5koymL/HDwH4svd8KIbs00=) 6: 3131332e31382e3133302e302f32342d3234203d3e2039383038.roa (hash: zDOWeX9XcM9h2tJJRyjYjzukX9m6ydEOUWtBszIYs2I=) 7: 3131332e31382e3139392e302f32342d3234203d3e2039383038.roa (hash: 26xHgpFQwzdYak11Uk8qGZoi6F5obP9Yhc9faJO/AC0=) 8: 3138322e3135372e302e302f31362d3136203d3e2039383038.roa (hash: bb97oY6zPLsKhBLVa0rQlewA3WGo8q51y04BsHtNgQM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:0e:36:fc:5e:42:45:8f:21:33:93:1a:eb:ca:6f:f1:c9:f8:ca:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=373B103C68D9B84455801815E437C49839794406 Validity Not Before: Sep 21 18:13:27 2026 GMT Not After : Sep 24 22:25:27 2026 GMT Subject: CN=B5E405615F43853138504A350AF92AA0FA284FD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:39:75:a0:c8:a8:3d:52:9e:6c:9d:5b:2d: a2:88:28:69:6f:45:b4:f8:fb:c7:50:d1:6e:d7:47: bf:19:0b:49:55:24:28:23:ca:a9:01:1a:8e:be:22: 8a:e9:bf:1b:b7:4f:88:f4:73:2c:bf:0f:46:36:a2: b5:6e:7d:69:cc:78:97:e7:b1:c7:bf:b1:48:2b:46: e2:39:59:a2:ec:de:42:71:21:ba:2c:d3:ec:fa:9f: 2e:fb:31:a9:b5:c9:1d:80:d5:97:b7:46:65:2a:88: 7c:68:b3:74:5c:fe:a5:36:91:76:18:88:92:84:83: 1a:3f:0b:f7:67:95:1b:8a:9c:8b:16:a7:24:4b:a8: 3c:e1:1d:06:65:35:18:aa:61:46:9d:0f:a8:a2:19: 72:78:29:0a:9c:0a:ea:cc:11:7c:90:dd:7f:ff:3f: 3e:cc:d5:d9:27:08:dd:63:2d:2c:11:43:1d:58:5b: 4c:fd:e9:e0:e4:ad:78:1e:e6:e5:b4:3b:3b:08:16: d9:ac:41:b3:bf:ea:01:b3:37:64:39:35:db:07:35: 39:58:00:b2:71:8c:4a:1c:5a:97:d6:31:7a:74:f2: e6:a6:03:86:0c:21:0c:43:c6:04:1b:c8:10:f9:4f: 51:8b:aa:21:56:31:30:59:bf:32:87:ea:bd:41:7e: 55:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E4:05:61:5F:43:85:31:38:50:4A:35:0A:F9:2A:A0:FA:28:4F:D2 X509v3 Authority Key Identifier: keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:86:06:46:0a:91:a6:61:fa:2d:4c:7e:3d:63:07:e7:45:07: 01:24:ad:e5:f3:bf:93:a1:2c:52:c9:ae:81:d0:c2:40:7f:9a: b7:01:bb:76:37:7a:7f:0a:ce:94:93:0b:5d:5e:fe:7e:61:48: 82:17:8b:7e:28:43:9b:d1:4f:30:c4:47:59:42:d2:57:c9:54: 9f:91:80:6e:31:0a:05:06:3f:43:9f:d1:a8:30:53:55:ce:57: c3:99:ab:a9:75:8d:7e:1f:f4:a7:b2:9f:5b:24:c7:1d:75:5e: 95:10:30:88:ea:58:2c:54:8e:d5:ef:82:c2:0c:58:ce:a2:d6: 9e:dd:b0:2e:df:b9:51:7a:63:bd:db:20:6c:59:0d:33:7e:8e: 1f:50:cb:c1:39:e5:e9:78:80:fb:e5:cd:0b:57:26:97:18:db: cf:9f:ea:93:19:f3:4d:69:5e:c0:6a:71:2d:a7:8c:f5:01:12: ba:7f:bb:e0:ca:5e:7e:54:b0:ce:7f:fa:50:f8:8c:4e:02:2f: 7f:d9:b9:42:5b:a3:eb:0c:5c:f8:fc:e8:58:02:a5:60:5f:68: ed:34:53:57:38:02:84:c8:65:36:71:59:85:0f:58:78:d1:f3: de:ce:44:2b:30:ab:d9:4d:a5:68:6a:79:ff:6a:39:9f:a8:40: d4:16:b5:4f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOw42/F5CRY8hM5Ma68pv8cn4yicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgz OTc5NDQwNjAeFw0yNjA5MjExODEzMjdaFw0yNjA5MjQyMjI1MjdaMDMxMTAvBgNV BAMTKEI1RTQwNTYxNUY0Mzg1MzEzODUwNEEzNTBBRjkyQUEwRkEyODRGRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15jl1oMioPVKebJ1bLaKIKGlv RbT4+8dQ0W7XR78ZC0lVJCgjyqkBGo6+Iorpvxu3T4j0cyy/D0Y2orVufWnMeJfn sce/sUgrRuI5WaLs3kJxIbos0+z6ny77Mam1yR2A1Ze3RmUqiHxos3Rc/qU2kXYY iJKEgxo/C/dnlRuKnIsWpyRLqDzhHQZlNRiqYUadD6iiGXJ4KQqcCurMEXyQ3X// Pz7M1dknCN1jLSwRQx1YW0z96eDkrXge5uW0OzsIFtmsQbO/6gGzN2Q5NdsHNTlY ALJxjEocWpfWMXp08uamA4YMIQxDxgQbyBD5T1GLqiFWMTBZvzKH6r1BflWrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUteQFYV9DhTE4UEo1CvkqoPooT9IwHwYDVR0j BBgwFoAUNzsQPGjZuERVgBgV5DfEmDl5RAYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQ2ODIyNy8wLzM3M0IxMDNDNjhEOUI4NDQ1NTgwMTgxNUU0MzdD NDk4Mzk3OTQ0MDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgzOTc5NDQwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0NjgyMjcvMC8zNzNCMTAzQzY4RDlC ODQ0NTU4MDE4MTVFNDM3QzQ5ODM5Nzk0NDA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIYGRgqRpmH6 LUx+PWMH50UHASSt5fO/k6EsUsmugdDCQH+atwG7djd6fwrOlJMLXV7+fmFIgheL fihDm9FPMMRHWULSV8lUn5GAbjEKBQY/Q5/RqDBTVc5Xw5mrqXWNfh/0p7KfWyTH HXVelRAwiOpYLFSO1e+CwgxYzqLWnt2wLt+5UXpjvdsgbFkNM36OH1DLwTnl6XiA ++XNC1cmlxjbz5/qkxnzTWlewGpxLaeM9QESun+74MpeflSwzn/6UPiMTgIvf9m5 Qluj6wxc+PzoWAKlYF9o7TRTVzgChMhlNnFZhQ9YeNHz3s5EKzCr2U2laGp5/2o5 n6hA1Ba1Tw== -----END CERTIFICATE-----Generated at Tue Sep 22 21:30:54 2026 by rpki-client